On Google Cloud navigate go to IAM & admin > Service accounts and click on CREATE SERVICE ACCOUNT.
Give your service account a name, check Furnish a new private key and select the aforementioned roles.